Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PsO_ZYc7f-0S0qqALkm2TG1kJmg.roa
File: PsO_ZYc7f-0S0qqALkm2TG1kJmg.roa (raw, json)
Hash identifier: nl69Vwc7Td7LX6u4t/To+Vp1M4AGBZurf3QoUvxeeaY=
Subject key identifier: 3E:C3:BF:65:87:3B:7F:ED:12:D2:AA:80:2E:49:B6:4C:6D:64:26:68
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28C2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PsO_ZYc7f-0S0qqALkm2TG1kJmg.roa
Signing time: Fri 01 Sep 2023 10:05:43 +0000
ROA not before: Fri 01 Sep 2023 10:05:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.205.64/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10434 (0x28c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3EC3BF65873B7FED12D2AA802E49B64C6D642668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:be:0a:32:10:5e:30:4e:6a:df:6a:b0:06:82:
69:2f:42:fb:8e:8c:2b:55:c7:97:39:02:6d:4a:cd:
20:be:25:11:5c:1e:a2:53:b5:82:36:46:90:29:54:
1a:8d:fe:1f:cf:50:e7:06:58:be:aa:35:ea:99:b0:
6c:3e:38:02:f2:ef:8c:a0:a1:13:0d:88:32:49:f5:
ad:f7:cc:f8:a5:6e:cb:88:07:e2:97:ce:b2:bf:67:
81:e5:41:68:98:83:c4:54:6b:f8:1d:60:e5:76:e2:
bc:58:47:7f:fa:4c:c2:eb:58:0c:9f:80:b2:79:00:
f2:f5:08:c7:c7:e7:6c:b6:2d:36:92:ca:5b:d0:99:
67:37:c6:ba:ae:90:8e:7a:23:19:da:dc:34:0b:75:
80:85:26:dd:21:29:9c:34:0d:0f:ef:36:05:2c:86:
3b:17:cd:34:38:ab:e6:ce:10:9c:e6:0a:2c:99:32:
fc:4d:ba:0b:5c:9e:00:8d:d6:2c:d1:e8:05:bc:69:
43:10:10:66:2c:85:26:1f:10:37:80:a2:e8:86:cd:
66:9f:45:52:5b:0f:5b:a8:ea:e9:2c:1d:52:d5:b8:
1d:e0:55:aa:e5:d3:d5:53:d0:77:cb:4d:4a:85:e5:
7b:50:ee:d6:73:ff:90:93:f6:33:00:6f:6f:c5:e8:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C3:BF:65:87:3B:7F:ED:12:D2:AA:80:2E:49:B6:4C:6D:64:26:68
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PsO_ZYc7f-0S0qqALkm2TG1kJmg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.205.64/26
Signature Algorithm: sha256WithRSAEncryption
58:52:b2:31:8b:d3:ee:92:95:86:7f:97:a0:73:a1:9f:9a:2e:
c4:ab:01:91:aa:ed:1e:6c:20:72:fa:c0:33:14:86:f7:51:3e:
f7:9f:fa:55:0e:be:9d:e3:7f:80:00:47:e4:12:65:e8:0f:62:
0d:34:68:e5:2e:ad:c0:ed:88:88:44:9b:a4:bb:a1:4b:02:56:
89:0a:32:8e:e0:59:72:d0:54:79:b2:27:af:88:41:cc:27:00:
6b:e2:02:c6:08:0f:ad:24:96:50:5f:06:8b:9f:48:04:fb:21:
62:ff:2a:6e:70:08:b4:ab:8b:37:f6:f1:ae:f1:69:36:f4:fd:
3e:31:78:0b:92:66:69:61:1d:12:e8:17:40:2f:21:1c:3a:6d:
b4:6a:5a:10:92:b2:35:af:97:ae:7a:fa:cf:10:d9:9f:85:12:
01:35:a5:06:a0:66:f9:33:48:d8:b6:3f:30:12:6f:89:aa:a0:
7b:b5:a4:ab:e5:33:13:81:e7:5e:85:3a:e1:c4:33:b0:1a:fc:
bd:9f:2e:fd:86:37:62:f4:a1:b0:e7:78:9d:10:e0:8f:10:5b:
a2:4d:42:a3:ad:b0:61:4f:ea:11:59:7f:83:52:14:0c:d5:3a:
32:81:f2:82:ac:d5:02:a6:a4:fe:e2:b8:11:15:d2:9d:8b:c0:
26:9e:77:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org